RE: ISA 2004 authentication issue

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 22 Jan 2006 08:23:44 -0600

He knows you already have a fishing pole and know how to use it, so
that's the only other viable option :)

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**

 

> -----Original Message-----
> From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx] 
> Sent: Saturday, January 21, 2006 2:25 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 authentication issue
> 
> http://www.ISAserver.org
> 
> Jim never tells me "here's your fishing pole."  He just says 
> "Shut up. 
> You're stupid."
> 
> ;)
> 
> -----
> "I'll see your Llama and up you a Badger."
> John T
> 
> 
> 
> ----- Original Message ----- 
> From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Saturday, January 21, 2006 12:15 PM
> Subject: [isalist] RE: ISA 2004 authentication issue
> 
> 
> http://www.ISAserver.org
> 
> As Jim would say "here's your fishing pole" :-)
> 
> http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/tro
> ubleshooti
> ng_fwc.mspx
> 
> Tom
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> **Who is John Galt?**
> 
> 
> 
> > -----Original Message-----
> > From: MJ [mailto:mjtech@xxxxxxxxx]
> > Sent: Saturday, January 21, 2006 2:09 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: ISA 2004 authentication issue
> >
> > http://www.ISAserver.org
> >
> > sounds good.
> >
> > then please tell me how to fix it, if you say that I don't 
> need then I
> > promise you I will turn off that option.
> >
> > Thanks
> >
> > -----Original Message-----
> > From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> > Sent: Saturday, January 21, 2006 3:04 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: ISA 2004 authentication issue
> >
> >
> > http://www.ISAserver.org
> >
> > Yep, but there's a secret registry entry that will fix it ;-)
> >
> > Thomas W Shinder, M.D.
> > Site: www.isaserver.org
> > Blog: http://spaces.msn.com/members/drisa/
> > Book: http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> > **Who is John Galt?**
> >
> >
> >
> > > -----Original Message-----
> > > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
> > > Sent: Saturday, January 21, 2006 1:48 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: ISA 2004 authentication issue
> > >
> > > http://www.ISAserver.org
> > >
> > > As I think about it more, I do remember putting a check 
> mark in the
> > > "Require all users to authenticate" once.  Shortly
> > afterwards, after a
> > > hundred phone calls about people getting login prompts, I had
> > > to turn it
> > > back off.
> > >
> > > -----Original Message-----
> > > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
> > > Sent: Saturday, January 21, 2006 2:34 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: ISA 2004 authentication issue
> > >
> > > http://www.ISAserver.org
> > >
> > > Okay, NOW I remember that option...
> > >
> > > -----Original Message-----
> > > From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
> > > Sent: Friday, January 20, 2006 11:59 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: ISA 2004 authentication issue
> > >
> > > http://www.ISAserver.org
> > >
> > > In 2004, you can still configure the the authentication
> > method for the
> > > web
> > > proxy listener.  Go to the properties for the network, select
> > > Web Proxy,
> > > and
> > > then click the "Authentication" button.
> > >
> > > This allows you to choose the auth methods supported for
> > your clients.
> > > This
> > > is where the OP had to select "require all users to
> > > authenticate."  Just
> > >
> > > making sure someone didn't put him in "basic auth" land...
> > >
> > > t
> > >
> > >
> > > -----
> > > "I'll see your Llama and up you a Badger."
> > > John T
> > >
> > >
> > >
> > > ----- Original Message -----
> > > From: "Ball, Dan" <DBall@xxxxxxxxxxx>
> > > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > > Sent: Friday, January 20, 2006 8:32 PM
> > > Subject: [isalist] RE: ISA 2004 authentication issue
> > >
> > >
> > > http://www.ISAserver.org
> > >
> > > It's ISA2004, not 2000, it uses regular groups.  Unless there is a
> > > setting with that name that completely escapes my memory.
> > >
> > > -----Original Message-----
> > > From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
> > > Sent: Friday, January 20, 2006 11:08 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: ISA 2004 authentication issue
> > >
> > > http://www.ISAserver.org
> > >
> > > The authentication method wasn't changed to "basic" by
> > chance, was it?
> > > Still at "Integrated Authentication?"
> > >
> > > t
> > >
> > > -----
> > > "I'll see your Llama and up you a Badger."
> > > John T
> > >
> > >
> > >
> > > ----- Original Message -----
> > > From: "MJ" <mjtech@xxxxxxxxx>
> > > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > > Sent: Friday, January 20, 2006 7:31 PM
> > > Subject: [isalist] RE: ISA 2004 authentication issue
> > >
> > >
> > > > http://www.ISAserver.org
> > > >
> > > > I rebooted and didn't fix it.
> > > > I believe that something was change by some body else while
> > > > troubleshooting
> > > > another problem about not being able to hit some web sites.
> > > > Thanks
> > > >
> > > > -----Original Message-----
> > > > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
> > > > Sent: Friday, January 20, 2006 10:21 PM
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] RE: ISA 2004 authentication issue
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > Had that happen a couple of times, a reboot usually cleared it.
> > > > Anything changed?
> > > >
> > > > -----Original Message-----
> > > > From: MJ [mailto:mjtech@xxxxxxxxx]
> > > > Sent: Friday, January 20, 2006 9:14 PM
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] RE: ISA 2004 authentication issue
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > ISA is a member server of the root domain,and all users 
> are in the
> > > child
> > > > domain.
> > > > the funny thing is that this been working for about 2
> > months with no
> > > > problems.
> > > >
> > > > -----Original Message-----
> > > > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
> > > > Sent: Friday, January 20, 2006 8:59 PM
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] RE: ISA 2004 authentication issue
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > There can be a lot of different reasons for it, but it 
> "shouldn't"
> > > > happen.  Is your ISA server a member of said domain?
> > > >
> > > > -----Original Message-----
> > > > From: MJ [mailto:mjtech@xxxxxxxxx]
> > > > Sent: Friday, January 20, 2006 8:16 PM
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] ISA 2004 authentication issue
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > ISA Server 2004, with "Windows Authentication" and "Require
> > > All Users
> > > To
> > > > Authenticate"
> > > >
> > > > Now with this ISA shouldn't prompt domain users for a user and a
> > > > password.
> > > >
> > > > The one I have still prompting. Is there a reason for this?
> > > How can I
> > > > fix
> > > > it?
> > > >
> > > > Thanks
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org
> > > Discussion List as:
> > > > dball@xxxxxxxxxxx
> > > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org
> > > Discussion List as:
> > > > mjtech@xxxxxxxxx
> > > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org
> > > Discussion List as:
> > > > dball@xxxxxxxxxxx
> > > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org
> > > Discussion List as:
> > > > mjtech@xxxxxxxxx
> > > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org
> > > Discussion List as:
> > >
> > > > thor@xxxxxxxxxxxxxxx
> > > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > > >
> > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org
> > Discussion List as:
> > > dball@xxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion
> > > List as:
> > > thor@xxxxxxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org
> > Discussion List as:
> > > dball@xxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org
> > Discussion List as:
> > > dball@xxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion
> > > List as: tshinder@xxxxxxxxxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org 
> Discussion List as:
> > mjtech@xxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: tshinder@xxxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: 
> thor@xxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 


Other related posts: